This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json) Hash identifier: EmLEcjEV4iTOlxuTY2CceTqAs4hkVLe32zMYVHvHn1M= Subject key identifier: AD:6E:ED:D9:68:F4:B5:40:68:E3:DC:26:E0:FA:07:44:F9:33:3F:45 Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Certificate serial: 019BFBE4FF5E79053BEB1EF46F0191EDEAAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft Manifest number: 16EA Signing time: Mon 26 Jan 2026 20:00:47 +0000 Manifest this update: Mon 26 Jan 2026 20:00:47 +0000 Manifest next update: Tue 27 Jan 2026 20:00:47 +0000 Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: dXXJX8FKKNtiDVphVPgKL8W7mYyaghyA32UVJhNSiAo=) 2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e4:ff:5e:79:05:3b:eb:1e:f4:6f:01:91:ed:ea:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4 Validity Not Before: Jan 26 20:00:47 2026 GMT Not After : Jan 27 20:00:47 2026 GMT Subject: CN=ad6eedd968f4b54068e3dc26e0fa0744f9333f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:7b:45:5d:37:df:f9:52:82:71:0e:47:a5: e7:d8:62:e8:f9:f8:c9:22:b4:db:29:ee:64:4b:c8: 1d:c7:8b:57:b5:a9:e4:a4:7b:54:d8:c9:60:a7:60: 12:8b:38:37:c8:f8:44:2e:14:67:d1:c8:6c:0a:04: 89:0c:76:c1:26:ca:49:d9:bb:95:f0:b7:ea:67:d4: 48:d6:7a:c1:b9:e7:99:6d:6b:87:09:53:77:45:7c: b3:59:33:0e:46:d6:c1:e6:49:bc:45:d1:d8:dd:06: bb:8f:44:8e:35:cf:c8:ae:51:af:80:37:c1:9b:26: e3:a7:aa:a1:11:2a:0c:47:9b:82:22:0d:86:29:be: fa:c1:a0:9c:a9:87:c5:e4:33:4e:0f:86:1e:ca:87: 76:f6:b5:9a:45:1f:ce:d9:42:6c:93:ef:3a:cd:79: a2:77:89:86:49:d8:a9:72:aa:40:f5:cf:47:45:41: f7:db:51:c8:74:9c:e1:97:3b:31:9b:81:87:c9:ab: 04:be:7d:91:35:05:08:61:6e:c7:22:54:fd:03:d3: 1f:b4:9f:f9:14:8d:c0:ac:35:80:fc:da:31:4f:6d: e5:53:a8:16:02:50:01:bb:2f:33:07:0f:80:ac:d8: ed:1a:c4:55:34:08:5c:0f:13:2d:09:26:ef:63:2b: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:ED:D9:68:F4:B5:40:68:E3:DC:26:E0:FA:07:44:F9:33:3F:45 X509v3 Authority Key Identifier: keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:13:57:9e:f3:aa:83:c2:f3:b8:23:19:77:92:db:b2:56:a7: 59:a3:32:6d:1f:03:e9:4e:50:5b:bf:2e:36:b8:49:22:45:61: c8:98:83:06:84:7b:ad:0f:0b:cf:db:0c:d9:3d:c6:0c:93:c5: 74:5e:2c:89:f4:df:7b:bf:1b:32:7f:b0:e3:af:60:b6:9a:5c: 38:00:69:1a:29:24:8e:89:b3:25:41:01:0a:2f:74:c2:22:8c: b5:ba:5f:f2:4b:70:54:83:d7:db:cf:3d:8b:80:73:5d:c0:3c: 5e:6b:18:43:2a:96:9d:ec:d4:35:d4:70:3a:04:62:76:1e:d3: 20:0a:d2:f9:0f:5d:31:04:87:ac:1b:bd:c1:a6:2f:86:d5:f0: 98:4d:4d:64:e1:3f:1e:c3:b8:a9:c1:17:3b:29:86:df:90:4a: 92:15:b6:5e:02:7f:25:4c:15:54:69:8f:f4:ab:ad:b9:aa:79: 56:02:a2:14:0a:32:10:07:d7:11:8f:0a:43:94:76:8b:48:6a: f2:bd:0b:15:b6:7f:72:2c:eb:94:9b:06:c6:a3:07:68:e6:c0: 4b:e7:7e:19:d5:31:b5:92:cf:6b:10:88:ac:d7:b2:2e:ab:4e: 8e:85:58:f5:e5:f4:11:66:90:a5:69:24:7a:dc:06:c2:f4:49: da:30:35:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75P9eeQU76x70bwGR7eqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx ZTNhYTQwHhcNMjYwMTI2MjAwMDQ3WhcNMjYwMTI3MjAwMDQ3WjAzMTEwLwYDVQQD EyhhZDZlZWRkOTY4ZjRiNTQwNjhlM2RjMjZlMGZhMDc0NGY5MzMzZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJd7RV033/lSgnEOR6Xn2GLo+fjJ IrTbKe5kS8gdx4tXtankpHtU2Mlgp2ASizg3yPhELhRn0chsCgSJDHbBJspJ2buV 8LfqZ9RI1nrBueeZbWuHCVN3RXyzWTMORtbB5km8RdHY3Qa7j0SONc/IrlGvgDfB mybjp6qhESoMR5uCIg2GKb76waCcqYfF5DNOD4Yeyod29rWaRR/O2UJsk+86zXmi d4mGSdipcqpA9c9HRUH321HIdJzhlzsxm4GHyasEvn2RNQUIYW7HIlT9A9MftJ/5 FI3ArDWA/NoxT23lU6gWAlABuy8zBw+ArNjtGsRVNAhcDxMtCSbvYyubwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1u7dlo9LVAaOPcJuD6B0T5Mz9FMB8GA1UdIwQY MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhNXnvOq g8LzuCMZd5LbslanWaMybR8D6U5QW78uNrhJIkVhyJiDBoR7rQ8Lz9sM2T3GDJPF dF4sifTfe78bMn+w469gtppcOABpGikkjomzJUEBCi90wiKMtbpf8ktwVIPX2889 i4BzXcA8XmsYQyqWnezUNdRwOgRidh7TIArS+Q9dMQSHrBu9waYvhtXwmE1NZOE/ HsO4qcEXOymG35BKkhW2XgJ/JUwVVGmP9Kutuap5VgKiFAoyEAfXEY8KQ5R2i0hq 8r0LFbZ/cizrlJsGxqMHaObAS+d+GdUxtZLPaxCIrNeyLqtOjoVY9eX0EWaQpWkk etwGwvRJ2jA1wQ== -----END CERTIFICATE-----Generated at Tue Jan 27 06:09:37 2026 by rpki-client